Penetration testing methodologies, frameworks, reporting, and automation tools.
hav0cx0/cve-2023-48795Scans SSH servers for Terrapin-affected OpenSSH versions by grabbing banners over port 22, enabling quick internal audits, penetration testing, and…
iamrajkumar1995/cve-2025-5781_freepbxProof-of-concept exploit for FreePBX Endpoint module CVE-2025-5781: chains unauthenticated SQL injection with database manipulation and scheduled…
kentox493/cve-2026-42945_nginxriftAutomates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…
686f6c61/poc-geoleak-cve-2026-52715PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit…
0xqrx/cve-2024-6333Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature.
0xterror/cve-2023-22047---oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
4minx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, an unauthenticated SQL injection in Metabase's password-reset endpoint. Forges an admin session for full…
0xterror/cve-2023-22047-oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
kentox493/cve-2026-46300_fragnesiaLinux kernel local privilege escalation exploit with automated prerequisite audit for CVE-2026-46300, validating patch status, XFRM ESP-in-TCP…
alixploit22/cve-2026-53587Python proof-of-concept for CVE-2026-53587, providing a focused exploit path to reproduce the vulnerability and support validation and defensive…
alixploit22/cve-2026-6440mencari sebuah kerentanan, wodpres dan mengungah shell di kerentanan wodpres tersebut
alixploit22/cvex2shelExploit for CVE-2026-64638, a pre-authentication reflected XSS in WordPress login, enabling injection of malicious JavaScript into /wp-login.php…
h4zaz/cve-2026-8794Username Enumeration via Authentication Timing Side-Channel in PaperCut NG
hunt-benito/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-coworkPoC exploit for CVE-2026-73678: unauthenticated RCE in MindsDB Cowork via attacker-supplied LLM key and unsandboxed scratchpad exec to run OS…
kimdir01/cve-2026-9090-pocPoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.
leeyoonjoo/cve-2026-42533CVE-specific proof-of-concept written in Python for vulnerability validation and security testing.
liam-worsley/cve-2025-32433-poc-analysisThis is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…
mohaimenul370/perform-an-rdp-exploitation-using-the-bluekeep-vulnerability-cve-2019-0708-on-windowsStep-by-step demonstration of BlueKeep CVE-2019-0708 exploitation against Windows Remote Desktop Services, including RCE via crafted RDP packets and…
